Statement of Work

Narrative Consulting LLC will perform a targeted Infrastructure Hardening Sprint to remediate specific identity and access gaps in Client's environment. This engagement focuses on tightening existing identity infrastructure — hardening configurations, enforcing controls, improving monitoring, and bringing documentation current. Specific gaps are scoped during the discovery call.

• Targeted remediation — address specific identity/access gaps identified in discovery call or prior assessment
• MFA enforcement & conditional access policies — configure and enforce multi-factor authentication, session controls, and risk-based access policies
• SIEM logging & monitoring — ensure identity events flow to SIEM with alerting on anomalies (failed logins, privilege escalation, unusual access patterns)
• Segregation of duties review — identify and resolve toxic access combinations
• Documentation catch-up — bring runbooks, architecture diagrams, and role definitions current
• Validation testing — verify all hardened controls work as documented

• Hardened configuration — all scoped controls implemented and verified in production
• Updated documentation — current-state runbooks, architecture diagrams, and role/permission definitions
• Validation report — evidence that each control is functioning as intended, suitable for audit submission

This engagement is expected to be completed within 2-3 weeks from the date of kickoff. Kickoff will be scheduled within 48 hours of SOW execution and deposit receipt.

• Specific identity/access gaps have been identified in a discovery call or prior assessment before engagement begins.
• Client provides admin-level access to identity and security systems within 48 hours of kickoff.
• Existing documentation (runbooks, architecture diagrams, role definitions) is available for review, even if outdated.
• Client designates a single point of contact with authority to approve configuration changes.

• Net-new infrastructure buildout (see Identity Governance Buildout engagement)
• Custom application development or code changes
• Ongoing monitoring or maintenance after delivery
• IDP, HRIS, or SIEM licensing costs
• Non-identity compliance domains

Payment schedule:

• 50% ($2,500.00) due upon execution of this Statement of Work
• 50% ($2,500.00) due upon delivery of final deliverables

Payment accepted via ACH transfer or credit card. All invoices are net-15.

Any changes to the scope, timeline, or cost of this engagement require a written change order signed by both parties before additional work proceeds. No surprise invoices — ever.

This engagement begins on and is expected to complete within of the kickoff date. If Consultant anticipates a delay, Client will be notified in writing with a revised timeline.

By signing below, both parties agree to the terms and conditions set forth in this Statement of Work. This SOW is governed by the terms of the Master Services Agreement between the parties, if one exists. In the absence of an MSA, the terms of this SOW shall govern.